Privacy Policy
What we hold about you, why, who else sees it, and how to get rid of it.
Who is responsible
[TO BE COMPLETED], [TO BE COMPLETED], is the controller of the personal data described here. For anything in this policy, write to [TO BE COMPLETED].
[TO BE COMPLETED] — an EU or UK representative and a Data Protection Officer, where one is required.
What we hold
Your account: the email address and identifier from your sign-in provider, and your plan and credit balance.
Your work: the scripts you write, the photos and clips you upload, the pictures and voiceovers produced from them, and the projects that arrange them. One upload may carry 20 files, up to 25 MB an image, 64 MB an audio file and 100 MB a video.
Your usage: a record of what each piece of work cost in credits, so your balance can be explained to you, and server logs that record requests for security and debugging.
We do not hold your card. Payment details go to Stripe and never reach our servers.
Why we hold it
To provide the service you asked for — this is the performance of our contract with you.
To bill you correctly and to keep the records tax law requires — a legal obligation.
To keep the service secure and to prevent abuse — our legitimate interest in running it safely.
Who else sees it
Sign-in is handled by Clerk. Payments are handled by Stripe. Pictures and planning are produced by OpenAI. Voiceovers are produced by ElevenLabs.
Each of these receives only what its part of the job needs, and only when you ask for that job. None of them is given your data to use for their own purposes.
[TO BE COMPLETED] — where these providers process data, and the transfer mechanism relied on for any processing outside your region.
How long we keep it
Your work is kept while your account exists. Deleted projects and files are held briefly so an accidental deletion can be recovered, then removed for good.
Billing records are kept for as long as tax law requires, whatever else you delete.
Your rights
You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it.
Deletion is also self-service: your account page erases your projects, uploads and generated media and revokes your sign-in, without asking us.
If you think we have handled your data badly you can complain to your data protection authority.
Cookies
We set the cookies our sign-in needs to keep you signed in, and we remember your theme choice in your browser. There is no advertising or cross-site tracking.
[TO BE COMPLETED] — update this section if analytics are ever added; that would need consent.